117489 matches found
CVE-2026-42129
A user with Viewer permissions can use a path traversal in the Loki data source plugin to reach administrative Loki endpoints and read sensitive backend configuration and internal service information...
CVE-2026-48966
creationtimestamp| type| source ---|---|--- 2026-06-22 14:16:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mov36cdxgj2d...
CVE-2026-7664
Summary: IBM Langflow OSS versions 1.0.0–1.8.4 are affected by an unauthenticated access issue due to improper authorization enforcement on the Streamable MCP transport endpoint, potentially allowing access to protected MCP project resources and execution of MCP operations. Affected products/vers...
EUVD-2026-38245
IBM Langflow OSS 1.0.0 through 1.9.3 has an vulnerability due to an improper isolation of Python execution combined with an authentication bypass that allows an unauthenticated attacker to execute arbitrary code on the host system, resulting in complete compromise...
EUVD-2026-38244
The Snowflake datasource allows for GET/PUT commands, which can allow any user with access to run queries against the data source to read/write files between the local grafana server and the connected Snowflake host...
CVE-2026-28381
The CVE affects the Grafana Snowflake data source: GET/PUT commands can enable a user with access to read/write files between the local Grafana server and the connected Snowflake host, potentially impacting confidentiality and integrity (per metrics: HIGH/ HIGH). Root cause and exact vulnerable c...
CVE-2026-28381 Local File Read/Write to Potential Privilege Escalation via Snowflake GET/PUT
The Snowflake datasource allows for GET/PUT commands, which can allow any user with access to run queries against the data source to read/write files between the local grafana server and the connected Snowflake host...
CVE-2026-48882
creationtimestamp| type| source ---|---|--- 2026-06-22 13:16:08+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mouxszodmm2q...
GHSA-39J6-789Q-QXVH
creationtimestamp| type| source ---|---|--- 2026-06-22 13:09:18+00:00| seen| https://bsky.app/profile/mfahlandt.bsky.social/post/3mouxgsffum2z...
CVE-2026-12863
creationtimestamp| type| source ---|---|--- 2026-06-22 12:37:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mouvnnghge2r...
CVE-2023-45796
creationtimestamp| type| source ---|---|--- 2026-06-22 12:22:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mouusrxc3a22...
CVE-2026-12580
creationtimestamp| type| source ---|---|--- 2026-06-22 12:17:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mouujtdzm622...
CVE-2026-49056
creationtimestamp| type| source ---|---|--- 2026-06-22 12:16:09+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mouuhr7hhs2m...
CVE-2023-45795
creationtimestamp| type| source ---|---|--- 2026-06-22 12:07:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moutz6ssbh2j...
CVE-2026-12862
creationtimestamp| type| source ---|---|--- 2026-06-22 12:00:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moutmiscx52y...
CVE-2025-4994
creationtimestamp| type| source ---|---|--- 2026-06-22 11:57:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mouth4sr262t...
CVE-2018-25105
creationtimestamp| type| source ---|---|--- 2026-06-22 11:07:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mouqmcp7rm2m...
CVE-2026-48887
creationtimestamp| type| source ---|---|--- 2026-06-22 10:16:06+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mounr4qopd2s...